Unified Edge & L4 Defense: Stop sensitive file leaks in Traefik, Caddy, NGINX, and protect non-HTTP services with TCP Warden.

The Problem: The moment any web server or VPS touches the public internet, it gets bombarded by automated bots probing for /.env, /.git, database dumps, and unauthenticated admin panels. Heavy enterprise WAFs are expensive, complex, and slow down your stack. The Solution: RouteWarden is a lightweight, zero-dependency edge defense middleware that runs directly inside your reverse proxy (Traefik, Caddy v2, NGINX / OpenResty, and standalone L4 TCP). It catches scanner probes at the edge before they touch your backend applications.

If you run a homelab or self-host apps like Vaultwarden, Immich, Home Assistant, or Nextcloud, you've probably watched your reverse proxy access logs get hammered 24/7 by bots probing for:

/.env and .git/config
wp-login.php (even when you don't even run PHP!)
Database dumps and exposed admin panels

We built RouteWarden with self-hosters front and center:

Zero Cloudflare dependency (no 100MB upload caps breaking your Immich/Nextcloud 4K videos, no corporate traffic decryption).
Tailscale & WireGuard friendly (one-line subnet bypass for 100.64.0.0/10 and your home LAN).
Featherweight (<15MB RAM on Raspberry Pis and N100 mini PCs).
Active defense (drop connections or hit bots back with memory-exhausting gzip bombs).

If you run a homelab or self-host apps like Vaultwarden, Immich, Home Assistant, or Nextcloud, you've probably watched your reverse proxy access logs get hammered 24/7 by bots probing for:

/.env and .git/config
wp-login.php (even when you don't even run PHP!)
Database dumps and exposed admin panels

We built RouteWarden with self-hosters front and center:

Zero Cloudflare dependency (no 100MB upload caps breaking your Immich/Nextcloud 4K videos, no corporate traffic decryption).
Tailscale & WireGuard friendly (one-line subnet bypass for 100.64.0.0/10 and your home LAN).
Featherweight (<15MB RAM on Raspberry Pis and N100 mini PCs).
Active defense (drop connections or hit bots back with memory-exhausting gzip bombs).

Routewarden

Zero-dependency edge defense for Traefik, Caddy & NGINX

Zero-dependency edge defense for Traefik, Caddy & NGINX

Forum Threads

Are you a self-hoster or homelab enthusiast? What does your edge setup look like?

Forum Threads

Are you a self-hoster or homelab enthusiast? What does your edge setup look like?